Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: 1pqY89Irqt/BrAbTH7KN3FhEjGGFJ5kD/d8xxQIk170=
Subject key identifier: D9:B8:11:31:06:2C:3E:22:38:70:F5:C1:0E:24:4B:1F:6F:1C:22:1A
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 019FAA87DA0A0D44C6E93DAAE855E643DB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 1501
Signing time: Tue 28 Jul 2026 21:00:57 +0000
Manifest this update: Tue 28 Jul 2026 21:00:57 +0000
Manifest next update: Wed 29 Jul 2026 21:00:57 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: 1KphyDrUMZkw4cffI+H7SgqbCuzFlxwWwYUtI0kf3a4=)
2: FMKR3CaUlRK9liJAv-tSvgFdbCg.roa (hash: khLsIGfKCgMHIIEDU5+wjoIrC4R3I6oBgk6LSwjYqtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:da:0a:0d:44:c6:e9:3d:aa:e8:55:e6:43:db:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Jul 28 21:00:57 2026 GMT
Not After : Jul 29 21:00:57 2026 GMT
Subject: CN=d9b81131062c3e223870f5c10e244b1f6f1c221a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:3a:a3:93:ce:22:c7:e6:43:e4:e7:9b:32:
84:7f:7c:8e:72:d6:10:5c:b9:17:09:b9:7e:6c:50:
e9:fa:44:4a:c1:50:bf:3d:59:15:cb:01:6e:9a:f1:
d4:78:cb:8b:62:72:08:c6:08:cb:0c:aa:0e:19:b7:
4a:95:f7:80:90:47:e2:00:54:e9:ff:92:b7:7a:71:
27:ed:21:ba:9d:36:7a:33:d1:34:ca:1a:ef:31:62:
16:b4:d2:f3:91:6d:40:f6:e4:32:56:fc:60:df:5c:
a0:cb:bd:e7:a9:26:5a:36:03:56:70:44:ce:3c:70:
e1:33:22:95:a3:09:74:c4:91:41:e8:3b:40:38:00:
f5:fc:34:7d:9c:3b:f1:f6:dd:80:2d:89:f2:f9:ef:
e2:d3:55:6c:7f:f2:ad:98:fe:a4:78:24:d0:db:39:
42:5d:ab:91:8d:f5:b8:df:d0:6d:bc:92:68:96:ff:
e9:79:4c:2c:02:11:a4:c9:15:76:2c:a1:6e:4d:2a:
aa:1a:26:88:17:a3:16:26:7d:d1:42:4e:6b:d0:3d:
4c:93:29:1d:c8:c6:9a:61:b2:96:ee:2f:cf:6c:20:
e6:44:1c:c4:15:a6:37:da:5d:36:cc:80:a3:be:45:
e1:6c:8a:2c:99:88:63:69:68:64:87:e6:11:fc:1c:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:11:31:06:2C:3E:22:38:70:F5:C1:0E:24:4B:1F:6F:1C:22:1A
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:4b:46:a0:d9:de:2b:4a:7b:a7:fa:69:1a:9c:9b:ac:1e:
26:cc:13:2f:d7:7a:18:2c:9d:ea:61:33:20:6e:2c:e7:37:f3:
f5:35:03:e6:05:48:75:9b:bb:6c:ba:0b:f2:29:2e:1f:5d:06:
c2:b7:07:e6:ee:5b:78:2c:24:26:7b:39:91:2e:d7:ce:4e:db:
cc:23:1e:63:95:52:93:de:05:d1:ee:a8:f9:60:40:65:ac:ca:
5d:d9:32:04:00:5c:06:db:b7:89:61:02:16:65:6e:4f:6c:40:
cc:2f:32:e4:16:b4:ea:94:3d:6a:c9:1c:90:02:fe:98:0d:99:
31:87:ad:9e:ec:31:1f:ad:f8:c4:d3:37:ca:c4:db:87:b9:95:
9d:6c:4c:06:54:7d:13:95:f4:a5:83:2b:75:82:d0:59:f4:37:
41:23:c2:a7:47:52:61:67:b5:2b:1d:ae:a2:71:b0:1a:27:50:
9d:46:8b:c6:e1:6f:1c:e2:04:a2:13:9b:63:d2:4c:be:58:62:
87:11:db:b4:ca:72:ef:50:92:c6:f9:a4:8b:85:5b:18:c1:d0:
f8:ee:6f:91:af:01:8c:f3:f1:7b:65:dd:79:9c:e1:59:aa:17:
f5:ea:65:1e:73:c9:ab:2d:42:06:56:7e:73:c3:74:ed:d1:1f:
60:72:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:47 2026 by rpki-client